由网友(浅念念)分享简介：有没有人有这在所有的经验吗？我想我的ACS连接起来，与我公司的本地活动目录，所以很明显，我将需要一个STS，涉及到这个活动目录认证/令牌。Does anyone have any experience with this at all? I'm trying to link up my ACS with my com...

有没有人有这在所有的经验吗？我想我的ACS连接起来，与我公司的本地活动目录，所以很明显，我将需要一个STS，涉及到这个活动目录认证/令牌。

Does anyone have any experience with this at all? I'm trying to link up my ACS with my companies local active directory, so obviously I'm going to need an STS that relates to this active directory for authentication/tokens.

我是否需要创建自己的自定义STS还是有一个工具，在那里的地方，使得这个简单？

Do I need to create my own custom STS or is there a tool out there somewhere that makes this simpler?

任何建议AP preciated，希望谁家这样做过。

Any suggestions appreciated, hopefully someone's done this before.

推荐答案

ACS通常是一个联合提供者。它不具有一个基本的AD

ACS is normally a Federation Provider. It doesn't have an underlying AD.

您需要活动目录联合服务2.0 。这是一个身份提供程序，坐在您的本地AD的顶部和联邦成员与ACS。

You need Active Directory Federation Services 2.0. This is an Identity Provider and sits on top of your local AD and federates with ACS.

（注意，ADFS只能验证对广告，但可以从公元属性，LDAP的和SQL Server授权）

(Note that ADFS can only authenticate against AD but can get attributes from AD, LDAP's and SQL Server for authorisation)